This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0AEA4ECFB111F0B80BEC86DAE4EC9C.roa
File:                     3F0AEA4ECFB111F0B80BEC86DAE4EC9C.roa (raw, json)
Hash identifier:          TONshFVIWkFsggvmzEkNCv6ZhQvcKu1TuPuvIDKCQRk=
Subject key identifier:   56:E0:63:EA:0A:F9:D0:91:F0:FC:4B:F4:3D:23:13:03:BF:E0:CC:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0AEA4ECFB111F0B80BEC86DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:01:03 +0000
ROA not before:           Tue 02 Dec 2025 19:00:58 +0000
ROA not after:            Sun 19 Nov 2028 19:00:58 +0000
asID:                     17561
IP address blocks:        156.232.112.0/24 maxlen: 24
                          156.232.113.0/24 maxlen: 24
                          156.232.114.0/24 maxlen: 24
                          156.232.115.0/24 maxlen: 24
                          156.232.116.0/24 maxlen: 24
                          156.232.117.0/24 maxlen: 24
                          156.232.118.0/24 maxlen: 24
                          156.232.119.0/24 maxlen: 24
                          156.232.120.0/24 maxlen: 24
                          156.232.121.0/24 maxlen: 24
                          156.232.122.0/24 maxlen: 24
                          156.232.123.0/24 maxlen: 24
                          156.232.124.0/24 maxlen: 24
                          156.232.125.0/24 maxlen: 24
                          156.232.126.0/24 maxlen: 24
                          156.232.127.0/24 maxlen: 24
                          156.236.5.0/24 maxlen: 24
                          156.236.11.0/24 maxlen: 24
                          156.236.12.0/24 maxlen: 24
                          156.236.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101195 (0x18b4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 19:00:58 2025 GMT
            Not After : Nov 19 19:00:58 2028 GMT
        Subject: CN=692f376e-bf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:62:cb:6d:bd:c6:f8:84:0c:7b:6e:52:de:
                    af:e6:aa:e0:39:65:81:75:dc:a9:79:96:a1:83:db:
                    e1:93:f5:e7:13:73:28:04:af:46:42:f5:84:d2:8d:
                    a3:78:14:e2:c6:8a:83:c0:dc:1f:6c:44:32:d3:a4:
                    3b:f9:ad:bb:c0:ef:7a:1f:4a:b9:27:7f:90:bc:48:
                    ba:40:56:65:9c:b1:74:00:87:3e:15:71:d3:42:68:
                    9f:ef:21:40:d8:71:16:0a:39:21:62:7f:05:2a:40:
                    90:01:01:c0:10:7e:ce:08:68:cb:aa:06:ab:19:b8:
                    2b:fb:90:d2:be:81:86:8d:75:d3:de:51:36:88:6a:
                    dd:55:cd:e6:80:3e:d6:cb:55:33:50:17:e5:94:fd:
                    33:a7:0b:b8:3d:9b:99:65:73:3a:bc:3c:6d:a3:68:
                    c6:a2:43:be:71:9b:ba:af:44:40:86:b8:04:de:61:
                    06:a9:52:3c:68:15:11:2c:12:1b:35:18:f9:2a:80:
                    ba:6b:82:b8:8c:1f:36:5e:d0:ae:05:81:44:24:a9:
                    53:32:cc:cb:83:92:92:be:ac:f4:60:ef:fe:3e:58:
                    b8:bc:ea:82:e9:e3:76:0a:12:57:d0:a0:02:bc:e6:
                    0f:e4:86:66:d6:c5:e5:40:cb:4c:58:52:68:65:87:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:63:EA:0A:F9:D0:91:F0:FC:4B:F4:3D:23:13:03:BF:E0:CC:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F0AEA4ECFB111F0B80BEC86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.112.0/20
                  156.236.5.0/24
                  156.236.11.0-156.236.12.255
                  156.236.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:9b:be:ab:9c:e0:83:c6:06:f3:a4:39:29:f9:2b:c8:a8:
         52:57:28:77:22:44:45:60:dd:fb:78:88:eb:6a:63:85:4f:ff:
         c6:90:af:43:12:53:06:83:c3:0f:39:70:f6:8c:a6:d0:80:70:
         2f:d1:6f:81:04:81:cd:d8:37:99:9f:08:fd:db:1e:0a:3c:de:
         40:dd:1d:f1:26:d0:09:2a:71:ac:42:a7:fe:05:25:c8:17:46:
         92:66:de:f2:34:d8:93:4f:2d:ac:06:da:4e:4e:26:0b:d3:63:
         2a:cf:15:ee:ea:ca:41:b8:62:37:9c:9a:64:33:7e:95:8b:43:
         a0:97:90:db:2f:fb:af:ce:dc:b8:1f:09:b9:5f:6b:e2:24:40:
         7c:6f:c1:9f:de:b3:61:68:ba:12:6b:0e:bd:33:cf:85:b1:4a:
         28:88:a5:3c:2d:2b:11:b4:fd:dd:67:fa:87:51:43:95:01:1c:
         a6:8d:24:a4:0b:7b:43:49:4c:f9:ad:fc:d0:5a:e5:c7:a4:c3:
         b9:74:67:e0:4d:a6:fa:20:ce:98:5c:b1:1f:4a:b5:6f:1c:93:
         44:98:2c:b0:23:6b:5b:90:27:bb:06:10:21:4a:d8:e3:41:86:
         b1:48:61:8c:df:e0:c0:9a:ac:b1:fd:b0:c5:7f:9e:d1:3e:80:
         9c:f8:ee:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client